Is the DSS v6/v7 affected by the heartbleed bug ?
The heartbleed bug does not affect our systems DSS v6 and DSS v7 - the OpenSSL implemented in the DSS is not vulnerable to the heartbleed bug.
According to this site:
http://heartbleed.com/
What versions of the OpenSSL are affected?
Status of different versions:
• OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable
• OpenSSL 1.0.1g is NOT vulnerable
• OpenSSL 1.0.0 branch is NOT vulnerable
• OpenSSL 0.9.8 branch is NOT vulnerable
Bug was introduced to OpenSSL in December 2011 and has been out in the wild since OpenSSL release 1.0.1 on 14th of March 2012. OpenSSL 1.0.1g released on 7th of April 2014 fixes the bug.
